Created attachment 33085[details]
Fix build/runtime with SSLv3 disabled in libssl
ab.c and mod_ssl unconditionally use SSLv3_method() functions. Attached diffs guard these with ifdefs. The ab.c diff is my own, mod_ssl is from Jérémie Courrèges-Anglas.

Created attachment 33101[details]
Support {Open,Libre}SSL versions with the OPENSSL_NO_SSL3 build-time option
We need to address this somewhat more comprehensively, IMO - similar to what was done for OPENSSL_NO_SSL2 in r1090367.
I'm attaching a preliminary version of a potential patch, basically untested for the time being. Testing feedback welcome.
The SSLProtocol documentation would also need an update in this case ("all" no longer including SSLv3 for OPENSSL_NO_SSL3 builds).

(In reply to stu-bz.apache from comment #2)
> There's a missing ifdef guard for
> ssl_engine_init.c:527, other than that it's good for me.
The patch is against trunk, where that code is slightly different (hunk #3 is rejected when applying to 2.4.x). Will have to be adjusted in the backport proposal.

This is ASF Bugzilla: the Apache Software Foundation bug system. In case
of problems with the functioning of ASF Bugzilla, please contact
bugzilla-admin@apache.org.
Please Note: this e-mail address is only for reporting problems
with ASF Bugzilla. Mail about any other subject will be silently
ignored.